Follow on: I just had the thought that using $ENV{PATH_INFO} might enable me to fool the browser by passing the name of the ZIP file as the last paramater to the CGI such as http://somewhere.com/cgi-bin/download/somearchive.zip but I can't see this working if I wanted to POST the name of the file to the CGI, am I thinking straight?